Lawson Products, Inc.
bd_363f3a46d7f495a3 · schema v1 · pii pii-v1
Full breach record for Lawson Products, Inc. →Lawson Products, Inc. reported a data breach affecting 28 Maine residents, part of a larger incident impacting 29,639 individuals. The breach, which occurred from February 2 to February 8, 2022, was discovered on February 8, 2022. The incident involved a phishing attack and malware. The compromised data includes names combined with financial account numbers or credit/debit card numbers along with their security codes, access codes, passwords, or PINs. Affected individuals were notified on July 11, 2022, and offered 24 months of credit monitoring and identity theft protection services through Equifax.
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_2dc5f4de83c35b9dCalifornia State AGfiled 2022-07-13Verified
- bd_4b1cfc699c2c3969Maine State AGfiled 2022-07-13Verified
- bd_5045c69054706d5dHHS OCRfiled 2022-07-20(7d gap)Verified
- bd_b4cac35129e60a5bHHS OCRfiled 2022-07-26(13d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/45b0c2c2-5164-4250-a3fa-8bed4ed4ec55.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 13, 2022
- Raw hash
- 23fc19c7e589f31ed10ca957121d5239549a4f6e63d10b72a112ae7121fcb74f
Reporting entity
- Name
- Lawson Products, Inc.norm: lawson products
Victim entity
- Name
- Lawson Products, Inc.norm: lawson products
Incident
- Discovered
- Feb 8, 2022
- Materiality determined
- —
- Notification sent
- Jul 11, 2022
- Affected individuals
- 28
- Data types
- FINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Phishing
Compliance
- Time to disclose
- 22 weeks(155 days from discovery to filing)
- Compliance flags
- ME AG >90d · 155dME resident >60d · 153d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 8, 2022→ Filed with AG: Jul 13, 2022155d 90 days ME AG >90d Maine Discovered: Feb 8, 2022→ Notified: Jul 11, 2022153d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.